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Dear Sir: 

PRELIMINARY AMENDMENT 

Please amend the application as follows prior to the substantive examination thereof: 

Amendments to the Specification begin on page 2 of this paper. 

Amendments to the Claims are reflected in the listing of claims which begins on 
page 3 of this paper. 



Remarks begin on page 1 1 of this paper. 
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AMENDMENTS TO THE SPECIFICATION 

Please replace the abstract from the International Application with the new abstract that 
is attached hereto on a separate sheet. 

A mothod and deviooc for a control of usago of content is disclos e d. Th e m e thod 
comprises tho ctops of obtaining tho cont e nt Content is obtained at a user device (04), 
def i ning usago rights at tho usor device (D1), th e wherein usage rights are defined 
specifying one or mor e usage restrictions and/or on e or mor e usage permissions of the 
content at a recipient device. (D2), gen e rat i ng a t th e user dev i ce (04) Integrity i nt e gr i ty 
protection information is generated for the defined usage rights, encrypting the content 
is encrypted with a content encryption key, e ncrypt i ng tho cont e nt encrypt i on key which 
is then encrypted with a key encryption key associated with the recipient device (02) 
and/or an operator of the recipient device^ (02)r The encrypted content , communicat i ng 
tho o ncryptod content, tho defin e d usage rights, the-encrypted content encryption key, 
and the integrity protection information are sent to the recipient device to verify (02)r 
v e rifying at the recip ie nt dov i ce (02) the integrity of the defined usage rights based on 
the integrity protection information, decrypting at tho recipient dev i c e (02) the encrypted 
content encryption key with a decryption key corresponding to the key encryption key, 
decrypting the encrypted content with the content encryption key in a secure 
env i ronm e nt (SE2) of the recipient device (02), applying the defined usage rights to the 
content in tho securo env i ronment (SE2) , and using the content at the recipient device 
(02) according to the applied usage rights. 

pjg 1 
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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1. (Currently Amended) A method M e thod for control of usage of 
content, wherein protected content exists being usage restricted by one or more first 
usage rights specifying one or more usage restrictions and/or one or more usage 
permissions of the protected content at a user device (04), the method comprising 
the steps of 

- obtaining the content at the user device (04) from the protected content in 
accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
environment (SE1) of the user device (044 and by accessing the decrypted 
content in the first secure environment (SE1) , 

- defining at least one usage right at the user device (D4), the at least one 
defined usage right specifying one or more usage restrictions and/or one or 
more usage permissions of the content at a recipient device (02) and the at 
least one defined usage right comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or 
more first usage rights, 

- generating at the user device (04) integrity protection information for the at 
least one defined usage right, 

- encrypting the content with a content encryption key, 

- encrypting the content encryption key with a key encryption key associated 
with the recipient device (02) and/or an operator of the recipient device (02), 

- communicating the encrypted content, the at least one defined usage right, 
the encrypted content encryption key, and the integrity protection information 
to the recipient device (02), 
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- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the 
recipient device (02), 

- verifying at the recipient device (02) the integrity of the at least one defined 
usage right based on the integrity protection information, 

- decrypting at the recipient device (02) the encrypted content encryption key 
with a decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment (SE2) of the recipient device (02), 

- applying the at least one defined usage right to the content in the secure 
environment (SE2) , and 

- using the content at the recipient device (02) according to the applied at 
least one usage right, 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires. 

2. (Currently Amended) The method according to claim 1 , the method 
further comprising the steps of 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device (02) before the expiry of the temporal restriction, 

- communicating an indication of the restricting or blocking or deleting to the 
user device (04). 

3. (Currently Amended) The method according to claim 2, further 
comprising the step of generating by the recipient device (02) at least one received 
usage right that is a subset of the at least one defined usage right for the indication. 

4. (Currently Amended) The method according to claim 3, further 
comprising the steps of 

- applying the at least one received usage right at the user device (04) until 
the expiry of the temporal restriction. 
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5. (Currently Amended) The method according to claim 3, further 
comprising the steps of 

- recognizing by the user device (04) that the at least one received usage 
right relates to the at least one defined usage right and 

- using the content at the user device (04) according to the at least one first 
usage right even within the time upon the expiration of the temporal 
restriction. 

6. (Currently Amended) The method according to claim 1 any of th e 
pr e ceding c l aims , wherein the step of communicating the at least one defined usage 
right to the recipient device (02) is executed by 

- communicating the at least one defined usage right from the user device 
(04) to a rights server (OS), 

- associating by the rights server (OS) the at least one defined usage right 
with authorization information indicating a rights issuer authorization for the at 
least one defined usage right to the recipient device (02), 

- communicating the at least one defined usage right and the authorization 
information from the rights server (OS) to the recipient device (02), 

and the recipient device (02) verifies the rights issuer authorization based on the 
received authorization information. 

7. (Currently Amended) The method according to claim 1 any of the 
proood i ng c l a i ms further comprising the step of communicating to a charging server 
an indication about the communication of the at least one defined usage right. 

8. (Currently Amended) The method according to claim 1 any of th e 
prec e d i ng cla i m , wherein an input unit of the user device (04) receives at least one 
instruction from a user for defining the at least one usage right. 
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9. (Currently Amended) The method according to claim 1 any of tho 
pr e c e d i ng c l a i ms further comprising the step of defining at least one further usage 
right for at least one further recipient device for controlling the usage of the content 
at the at least one further device. 

10. (Currently Amended) A user device for controlling a usage of 
content at a recipient device (02), the user device (D4) comprising 

at least a transmission unit and a processing unit, wherein protected content 
exists being usage restricted by one or more first usage rights specifying one or 
more usage restrictions and/or one or more usage permissions of the protected 
content at the user device (04), and 

the processing unit [[is]] being adapted to obtain the content from the protected 
content in accordance with the one or more first usage rights by decrypting the 
protected content with a first content encryption key in a first secure environment 
(SE1) of the user device and by accessing the decrypted content in the first 
secure environment (SE1) , to define at least one usage right specifying one or more 
usage restrictions and/or one or more usage permissions of the content at the 
recipient device (D2), the at least one defined usage right comprising a temporal 
restriction, to verify that the at least one defined usage right is a subset of the one or 
more first usage rights, to generate integrity protection information for the at least 
one defined usage right, to encrypt the content with a content encryption key, to 
encrypt the content encryption key with a key encryption key associated with the 
recipient device (02) and/or an operator of the recipient device (02). the 
transmission unit [[is]] being adapted to send the encrypted content, the at least one 
defined usage right, the encrypted content encryption key, and the integrity 
protection information to the recipient device (02), and the processing unit [[is]] 
being adapted to restrict the one or more first usage rights in consequence of the 
definition and/or the communication of the at least one defined usage right to the 
recipient device (02) and to abolish the restriction of the one or more first usage 
rights the when temporal restriction expires. 
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11. (Currently Amended) The user device according to claim 9, whoroin 
the user device [[is]] being adapted to load the protected content via a receiving unit 
and to store the protected content at a storage and/or to store pre-installed protected 
content at the storage. 

12. (Currently Amended) The user device according to claim 1 or 10 , 
further comprising a receiving unit and the receiving unit is adapted to receive an 
indication of a restricting or a blocking or a deleting of the at least one defined usage 
rights at the recipient device (02-) before the expiry of the temporal restriction. 

13. (Previously Presented) The user device according to claim 12, wherein 
the indication comprises at least one received usage right that is a subset of the at 
least one defined usage right. 

14. (Previously Presented) The user device according to claim 13, wherein 
the processing unit is adapted to apply the at least one received usage right until the 
expiry of the temporal restriction. 

1 5. (Currently Amended) The user device according to claim 1 3, wh e r ei n 
the user device [[is]] being adapted to recognize that the at least one received usage 
right relates to the at least one defined usage right and to use the content according 
to the at least one first usage right even within the time upon the expiration of the 
temporal restriction. 

16. (Currently Amended) The user device according to claim 10 any of 
tho claims 0 to 13 , wherein the processing unit is adapted to generate an instruction 
for a rights server (OS) to associate the at least one defined usage right with 
authorization information indicating a rights issuer authorization for the at least one 
defined usage right to the recipient device (02-) and to communicate the at least one 
defined usage right and the authorization information to the recipient device (02-), 
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and the transmission unit is adapted send the instruction and the at least one 
defined usage right to the rights server (OS). 

17. (Currently Amended) The user device according to claim 10 any th e 
c l a i ms 9 to 44 , wherein the transmission unit is adapted to send to a charging server 
an indication about the communication of the at least one defined usage right to the 
recipient device (02). 

18. (Currently Amended) The user device according to claim 10 any of 
c l aims 9 to 15 , the user device (04) further comprising an input unit which is adapted 
to receive at least one instruction from a user and the processing unit is adapted to 
define the at least one usage right based on the at least one instruction from the 
user. 

19. (Currently Amended) The user device according to claim 10 any of 
th e c l a i ms 9 to 16 , wherein the processing unit is adapted to define at least one 
further usage right for at least one further recipient device for controlling the usage of 
the content at the at least one further recipient device. 

20. (Currently Amended) A recipient device (02) for a controlled usage 
of content, the recipient device (02) comprising at least a receiving unit and 
processing unit, wherein the receiving unit is adapted to receive the content being 
encrypted by a content encryption key, at least one defined usage right specifying 
one or more usage restrictions and/or usage permissions of the content and the at 
least one defined usage right comprising a temporal restriction, a content encryption 
key being encrypted by a key encryption key associated with the recipient device 
(02) and/or an operator of the recipient device (024, and integrity protection 
information for the at least one defined usage right, the processing unit is adapted to 
verify the integrity of the at least one usage right based on the integrity protection 
information, to decrypt the encrypted content encryption key with a decryption key 
corresponding to the key encryption key, to decrypt the encrypted content with the 
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content encryption key in a secure environment (SE2) , to apply the at least one 
defined usage right to the content in the secure environment (SE2) , and to use the 
content according to the applied at least one defined usage right. 

21. (Currently Amended) The recipient device according to claim 20 
[[18]], wherein the processing unit is adapted to generate an alert if the integrity of 
the at least one defined usage right is violated and to initiate an indication of the alert 
at an output unit. 

22. (Currently Amended) The recipient device according to claim 20 48 
or 19 further comprising a transmission unit and the processing unit is adapted to 
restrict or block or delete the at least one defined usage right before the temporal 
restriction expires and to generate an indication of the restricting or the blocking or 
the deleting, and the transmission unit is adapted to send the indication to the user 
device (S44. 

23. (Previously Presented) The recipient device according to claim 22, 
wherein the processing unit is adapted to generate at least one received usage right 
that is a subset of the at least one defined usage right for the indication. 

24. (Currently Amended) The recipient device according to claim 20 any 
of the cla i ms 20 to 23 , wherein the receiving unit is adapted to receive the at least 
one defined usage right and associated authorization information indicating a rights 
issuer authorization from a rights server (OS) and the processing unit is adapted to 
verify the rights issuer authorization based on the received authorization information. 

25. -28 (Canceled) 
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REMARKS 



Claims 1-24 remain in this application. Applicant respectfully submits no new matter 
has been added. Favorable consideration of the pending claims is respectfully 
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requested. 
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